CVE-2023-36252

2023-06-2600:00:00

mitre

www.cve.org

ateme flamingo xl

ateme flamingo xs

remote code execution

denial of service

session expiration function

8.9 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

59.3%

JSON

An issue in Ateme Flamingo XL v.3.6.20 and XS v.3.6.5 allows a remote authenticated attacker to execute arbitrary code and cause a denial of service via a the session expiration function.

References

www.zeroscience.mk/en/vulnerabilities/